Script to check forticlient package version
This commit is contained in:
parent
6a9fbdd0a3
commit
af735add43
GPG Key ID:
E759BAA22501AF32
|
|
@ -0,0 +1,327 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# Purpose {{{
|
||||||
|
## Create a temp file (to monitor) if an upgrade is available for Forticlient
|
||||||
|
## from official website − https://www.fortinet.com/fr/support/product-downloads#vpn
|
||||||
|
## It's based on .deb package installation to check the current version.
|
||||||
|
## It can also compare the current available version in APT repositories
|
||||||
|
## if "repo" is given as first argument.
|
||||||
|
## If a new version is available, the script will try to download it.
|
||||||
|
## How-to use {{{
|
||||||
|
### 1. Create a cron job, eg :
|
||||||
|
#00 20 * * * root /opt/repos/ipr.scripts/app/check.forticlient.update
|
||||||
|
### 2-1 Create a cron job to compare the version available in an APT repository :
|
||||||
|
#00 20 * * * root /opt/repos/ipr.scripts/app/check.forticlient.update --mode repo
|
||||||
|
### 2. Monitor the temp file : /tmp/.forticlient.upgrade
|
||||||
|
# Or enable MAILTO in cronjob and edit the script to print a message.
|
||||||
|
# Or send a mail.
|
||||||
|
# …
|
||||||
|
## }}}
|
||||||
|
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
# Vars {{{
|
||||||
|
PROGNAME=$(basename "${0}"); readonly PROGNAME
|
||||||
|
PROGDIR=$(readlink -m $(dirname "${0}")); readonly PROGDIR
|
||||||
|
ARGS="${*}"; readonly ARGS
|
||||||
|
readonly NBARGS="${#}"
|
||||||
|
[ -z "${DEBUG}" ] && DEBUG=0
|
||||||
|
## Export DEBUG for sub-script
|
||||||
|
export DEBUG
|
||||||
|
|
||||||
|
## Default values for some vars
|
||||||
|
CHECK_MODE_DEFAULT="file"
|
||||||
|
|
||||||
|
## Colors
|
||||||
|
readonly PURPLE='\033[1;35m'
|
||||||
|
readonly RED='\033[0;31m'
|
||||||
|
readonly RESET='\033[0m'
|
||||||
|
readonly COLOR_DEBUG="${PURPLE}"
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
usage() { # {{{
|
||||||
|
|
||||||
|
cat << HELP
|
||||||
|
|
||||||
|
usage: $PROGNAME [check_mode] [-m|-d|-h]
|
||||||
|
|
||||||
|
Compare current version of an installed Forticlient and the last available.
|
||||||
|
|
||||||
|
EXAMPLES :
|
||||||
|
- Compare the current version of Forticlient installed from a .deb file
|
||||||
|
${PROGNAME}
|
||||||
|
${PROGNAME} --mode file
|
||||||
|
|
||||||
|
- Compare the current version of Forticlient available in the APT repo
|
||||||
|
${PROGNAME} repo
|
||||||
|
${PROGNAME} --mode repo
|
||||||
|
|
||||||
|
OPTIONS :
|
||||||
|
-m,--mode
|
||||||
|
Set the check_mode to use to get current version of Forticlient client
|
||||||
|
Available mode :
|
||||||
|
* repo
|
||||||
|
* file (default behaviour)
|
||||||
|
|
||||||
|
-d,--debug
|
||||||
|
Enable debug messages.
|
||||||
|
|
||||||
|
-h,--help
|
||||||
|
Print this help message.
|
||||||
|
HELP
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
debug_message() { # {{{
|
||||||
|
|
||||||
|
local_debug_message="${1}"
|
||||||
|
|
||||||
|
## Print message if DEBUG is enable (=0)
|
||||||
|
[ "${DEBUG}" -eq "0" ] && printf '\e[1;35m%-6b\e[m\n' "DEBUG − ${PROGNAME} : ${local_debug_message}"
|
||||||
|
|
||||||
|
unset local_debug_message
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
error_message() { # {{{
|
||||||
|
|
||||||
|
local_error_message="${1}"
|
||||||
|
local_error_code="${2}"
|
||||||
|
|
||||||
|
## Print message
|
||||||
|
printf '%b\n' "ERROR − ${PROGNAME} : ${RED}${local_error_message}${RESET}"
|
||||||
|
|
||||||
|
unset local_error_message
|
||||||
|
|
||||||
|
exit "${local_error_code:=66}"
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
is_var_empty() { # {{{
|
||||||
|
|
||||||
|
## Return False by default
|
||||||
|
return_var_empty="1"
|
||||||
|
## Total number of variables to test
|
||||||
|
local_total_var_empty="${#}"
|
||||||
|
|
||||||
|
loop_count_var_empty="0"
|
||||||
|
|
||||||
|
## While it remains a variable to test
|
||||||
|
while [ "${local_total_var_empty}" -gt "${loop_count_var_empty}" ]; do
|
||||||
|
debug_message "is_var_empty − \
|
||||||
|
Test var: ${RED}${1}${COLOR_DEBUG}."
|
||||||
|
### Test if this is empty and set return value to True
|
||||||
|
[ -z "${1}" ] && return_var_empty="0"
|
||||||
|
|
||||||
|
### Increase the number of tested variables
|
||||||
|
loop_count_var_empty=$((loop_count_var_empty+1))
|
||||||
|
|
||||||
|
### Shift to the next variable
|
||||||
|
shift
|
||||||
|
done
|
||||||
|
|
||||||
|
unset local_total_var_empty
|
||||||
|
unset loop_count_var_empty
|
||||||
|
|
||||||
|
return "${return_var_empty}"
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
define_vars() { # {{{
|
||||||
|
|
||||||
|
## If check_mode wasn't defined (argument) {{{
|
||||||
|
## Use default value
|
||||||
|
is_var_empty "${check_mode}" \
|
||||||
|
&& debug_message "define_vars − Use default value (${CHECK_MODE_DEFAULT}) for check_mode variable." \
|
||||||
|
&& check_mode="${CHECK_MODE_DEFAULT}"
|
||||||
|
## }}}
|
||||||
|
|
||||||
|
## Get forticlient_current_version according to the check_mode {{{
|
||||||
|
case "${check_mode}" in
|
||||||
|
"repo" ) ## Check forticlient version from repository
|
||||||
|
forticlient_current_version=$(apt-cache policy -- forticlient | awk '/Candidate:/ {print $2}' | sed 's/.:\(.*\)-.*/\1/')
|
||||||
|
;;
|
||||||
|
"file" ) ## Check forticlient version from installed .deb file
|
||||||
|
forticlient_current_version=$(dpkg --list -- forticlient | awk '/^ii *forticlient/ {print $3}' | sed 's/.:\(.*\)-.*/\1/')
|
||||||
|
;;
|
||||||
|
* ) ## unknow mode
|
||||||
|
error_message "define_vars − Invalid check mode: ${check_mode}" 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
## If forticlient_current_version is empty
|
||||||
|
is_var_empty "${forticlient_current_version}" \
|
||||||
|
&& error_message "define_vars − Error with forticlient_current_version variable (${forticlient_current_version})" 2
|
||||||
|
|
||||||
|
## }}}
|
||||||
|
|
||||||
|
## Forticlient vars for new version {{{
|
||||||
|
## Fortinet offer "always" the same URL to download .deb package.
|
||||||
|
## This URL can be expanded to get package version
|
||||||
|
forticlient_new_version_expanded_url=$(curl --silent https://unshorten.me/s/https://links.fortinet.com/forticlient/deb/vpnagent)
|
||||||
|
forticlient_new_version=$(echo "${forticlient_new_version_expanded_url}" | sed -e 's/http.*forticlient_vpn_\(.*\)_amd64.deb/\1/')
|
||||||
|
|
||||||
|
is_var_empty "${forticlient_new_version_expanded_url}" "${forticlient_new_version}" \
|
||||||
|
&& error_message "define_vars − Error with new version variables (forticlient_new_version_expanded_url: ${forticlient_new_version_expanded_url} ; forticlient_new_version: ${forticlient_new_version})." 3
|
||||||
|
## }}}
|
||||||
|
|
||||||
|
## Vars for temp files
|
||||||
|
forticlient_new_version_file="/tmp/.forticlient.upgrade"
|
||||||
|
forticlient_new_pkg_path="/tmp/forticlient_${forticlient_new_version}_amd64.deb"
|
||||||
|
forticlient_tmp_pkg_path="/tmp/.forticlient_${forticlient_new_version}_amd64.deb"
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
is_version_greater_than() { # {{{
|
||||||
|
|
||||||
|
first_value="${1}"
|
||||||
|
value_to_compare="${2}"
|
||||||
|
|
||||||
|
## Return False by default
|
||||||
|
return_is_version_greater_than="1"
|
||||||
|
|
||||||
|
debug_message "is_version_greater_than − \
|
||||||
|
Is first value (${first_value}) greater than the second value (${value_to_compare})."
|
||||||
|
|
||||||
|
if printf '%s\n' "${first_value}" "${value_to_compare}" | sort --check=quiet --version-sort; then
|
||||||
|
debug_message "is_version_greater_than − ${first_value} <= ${value_to_compare} ."
|
||||||
|
return_is_version_greater_than="1"
|
||||||
|
else
|
||||||
|
debug_message "is_version_greater_than − ${first_value} > ${value_to_compare} ."
|
||||||
|
return_is_version_greater_than="0"
|
||||||
|
fi
|
||||||
|
|
||||||
|
unset first_value
|
||||||
|
unset value_to_compare
|
||||||
|
|
||||||
|
return "${return_is_version_greater_than}"
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
main() { # {{{
|
||||||
|
|
||||||
|
define_vars
|
||||||
|
|
||||||
|
# Behaviour can be tested by overriding this variable
|
||||||
|
#forticlient_current_version="7.0.0.0000"
|
||||||
|
#forticlient_current_version="${forticlient_new_version}"
|
||||||
|
#forticlient_current_version="9.9.9.9999"
|
||||||
|
|
||||||
|
if is_version_greater_than "${forticlient_new_version}" "${forticlient_current_version}"; then
|
||||||
|
debug_message "Test version − \
|
||||||
|
New version (${forticlient_new_version}) seems more recent than the current one (${forticlient_current_version})."
|
||||||
|
|
||||||
|
## If it doesn't already exists, download the package for this new version
|
||||||
|
if [ ! -f "${forticlient_new_pkg_path}" ]; then
|
||||||
|
debug_message "Deb file − \
|
||||||
|
Download .deb file from fortinet.com to ${forticlient_new_pkg_path} ."
|
||||||
|
wget --quiet https://links.fortinet.com/forticlient/deb/vpnagent --output-document="${forticlient_new_pkg_path}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Verify downloaded package
|
||||||
|
# Check the version from dpkg info {{{
|
||||||
|
forticlient_dpkg_version=$(dpkg --info -- "${forticlient_new_pkg_path}" | awk '/ Version/ { print $2 }')
|
||||||
|
|
||||||
|
if [ "${forticlient_dpkg_version}" = "${forticlient_new_version}" ]; then
|
||||||
|
debug_message "Check dpkg version − \
|
||||||
|
New version and .deb file informations are similar."
|
||||||
|
## Create a temp file to monitor
|
||||||
|
touch -- "${forticlient_new_version_file}"
|
||||||
|
printf '\e[1;35m%-6s\e[m\n' "An upgrade is available for forticlient (current : ${forticlient_current_version}) : ${forticlient_new_version}." >> "${forticlient_new_version_file}"
|
||||||
|
|
||||||
|
## Exit
|
||||||
|
exit 0
|
||||||
|
else
|
||||||
|
debug_message "Check dpkg version − \
|
||||||
|
New version and .deb file informations mismatch, don't need to go further."
|
||||||
|
|
||||||
|
# }}}
|
||||||
|
# Remove useless file {{{
|
||||||
|
## Ensure to remove the file to monitor
|
||||||
|
rm --force -- "${forticlient_new_version_file}"
|
||||||
|
|
||||||
|
## Keep a record of the downloaded package because as a new release might come soon
|
||||||
|
mv --force -- "${forticlient_new_pkg_path}" "${forticlient_tmp_pkg_path}"
|
||||||
|
|
||||||
|
## Exit
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
else
|
||||||
|
debug_message "Test version − The current version is the same or is more recent than the available one."
|
||||||
|
## Ensure to remove any temp file and useless .deb file
|
||||||
|
rm --force -- "${forticlient_new_version_file}" "${forticlient_new_pkg_path}" "${forticlient_tmp_pkg_path}"
|
||||||
|
|
||||||
|
## Exit
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
# }}}
|
||||||
|
}
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
# Manage arguments # {{{
|
||||||
|
# This code can't be in a function due to arguments
|
||||||
|
|
||||||
|
if [ ! "${NBARGS}" -eq "0" ]; then
|
||||||
|
|
||||||
|
manage_arg="0"
|
||||||
|
|
||||||
|
## If the first argument is not an option
|
||||||
|
if ! printf -- '%s' "${1}" | grep --quiet --extended-regexp -- "^-+";
|
||||||
|
then
|
||||||
|
## Consider it as the mode to use to get current forticlient version
|
||||||
|
check_mode="${1}"
|
||||||
|
## Move to the next argument
|
||||||
|
shift
|
||||||
|
manage_arg=$((manage_arg+1))
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Parse all options (start with a "-") one by one
|
||||||
|
while printf -- '%s' "${1}" | grep --quiet --extended-regexp -- "^-+"; do
|
||||||
|
|
||||||
|
case "${1}" in
|
||||||
|
-m|--mode ) ## Define check_mode
|
||||||
|
## Move to the next argument
|
||||||
|
shift
|
||||||
|
## Define var
|
||||||
|
readonly check_mode="${1}"
|
||||||
|
;;
|
||||||
|
-d|--debug ) ## debug
|
||||||
|
DEBUG=0
|
||||||
|
;;
|
||||||
|
-h|--help ) ## help
|
||||||
|
usage
|
||||||
|
## Exit after help informations
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
-- ) ## End of options list
|
||||||
|
## End the while loop
|
||||||
|
break
|
||||||
|
;;
|
||||||
|
* ) ## unknow option
|
||||||
|
printf '%b\n' "${RED}Invalid option: ${1}${RESET}"
|
||||||
|
printf '%b\n' "---"
|
||||||
|
usage
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
debug_message "Arguments management − \
|
||||||
|
${RED}${1}${COLOR_DEBUG} option managed."
|
||||||
|
|
||||||
|
## Move to the next argument
|
||||||
|
shift
|
||||||
|
manage_arg=$((manage_arg+1))
|
||||||
|
|
||||||
|
done
|
||||||
|
|
||||||
|
debug_message "Arguments management − \
|
||||||
|
${RED}${manage_arg}${COLOR_DEBUG} argument(s) successfully managed."
|
||||||
|
else
|
||||||
|
debug_message "Arguments management − \
|
||||||
|
No arguments/options to manage."
|
||||||
|
fi
|
||||||
|
|
||||||
|
# }}}
|
||||||
|
|
||||||
|
main
|
||||||
|
|
||||||
|
exit 255
|
||||||
Loading…
Reference in New Issue